CVE-2026-109519

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

CVE-2026-109519 YouTransfer Template Rendering template path traversal

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

CVE-2026-109519

The software YouTransfer (versions up to 0.0.7/1.0.6/1.1.0 ) is vulnerable to a path traversal vulnerability within the Template Rendering component. The flaw exists in an unknown function associated with the /settings/template file, allowing for remote manipulation. While the vendor has not prov...

CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

Remote Code Execution

YouTransfer is vulnerable to Remote Code Execution. The vulnerability is due to an issue in the sendmail transport integration component, where attackers can execute arbitrary code via supplying a crafted request...

EUVD-2026-36778

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

GHSA-68MC-H6H8-79WJ YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

Arbitrary Code Injection

Overview youtransfer is a self-hosted file transfer solution. Affected versions of this package are vulnerable to Arbitrary Code Injection through the sendmail transport integration component. An attacker can execute arbitrary code by supplying a specially crafted request. Remediation There is no...

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

PT-2026-49321

Name of the Vulnerable Software and Affected Versions YouTransfer version 1.0.6 Description An issue in the sendmail transport integration component allows attackers to execute arbitrary code by supplying a crafted request. Recommendations At the moment, there is no information about a newer...

CVE-2026-50880: Improper Control of Generation of Code

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

CVE-2026-50880

The self-hosted file transfer solution YouTransfer v1.0.6 is vulnerable to Arbitrary Code Injection due to an issue in the sendmail transport integration component. An attacker can execute arbitrary code by supplying a crafted request . No fixed version or patch is currently available for this vu...